You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The text was updated successfully, but these errors were encountered:
mdedetrich
changed the title
Parse JSON that has has been formatted with the Json Array Vulnerability Protection
Correctly Parse JSON that has has been formatted with the JSON Array Vulnerability Protection
Dec 3, 2014
http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx
tornadoweb/tornado#1009 (comment)
https://docs.angularjs.org/api/ng/service/$http
Long story short, due to a JSON security vulnerability, sites can output their json in the form of
Which represents the original json value of
Alternately (and my webserver does this), it can prelude the original JSON with the following string
So the previous example would look like
The
require.js
JSON plugin should account for this, currently it fails parsing with the following error message(when using the prelude version)
The text was updated successfully, but these errors were encountered: